Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/Mb5hn-BrCPO5ljPCFkaRQWFxy60.roa
File: Mb5hn-BrCPO5ljPCFkaRQWFxy60.roa (raw, json)
Hash identifier: 2KV69LWwY9eLNuOy/5Lkz4QVj196TWk0BA1Ob7uPslc=
Subject key identifier: 31:BE:61:9F:E0:6B:08:F3:B9:96:33:C2:16:46:91:41:61:71:CB:AD
Certificate issuer: /CN=68d6604c88c2e04e6167241315b74a758ce648c3
Certificate serial: 019F98BE4526D3420A168476935B338F0A5E
Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/Mb5hn-BrCPO5ljPCFkaRQWFxy60.roa
Signing time: Sat 25 Jul 2026 10:07:14 +0000
ROA not before: Sat 25 Jul 2026 10:07:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 5.83.16.0/21 maxlen: 21
5.83.16.0/22 maxlen: 24
5.83.20.0/22 maxlen: 24
62.84.248.0/21 maxlen: 24
176.113.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:98:be:45:26:d3:42:0a:16:84:76:93:5b:33:8f:0a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3
Validity
Not Before: Jul 25 10:07:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31be619fe06b08f3b99633c2164691416171cbad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4b:e3:4f:a2:1a:f2:5c:bb:5d:23:bf:12:d6:
ae:ae:c5:84:b3:14:58:48:c2:95:d7:62:19:d4:e6:
70:90:54:3b:eb:6f:c4:80:13:0a:d7:c5:b9:b4:a8:
df:a7:0f:fe:19:ee:ca:36:97:36:ba:88:65:65:87:
0f:38:bf:fa:4f:92:b9:b8:1e:98:58:e4:b8:29:f9:
f4:96:1d:2b:6a:a4:14:4f:0c:85:46:0d:a6:d8:a0:
ee:df:35:64:70:d8:15:6b:0d:22:56:5b:3f:14:2c:
08:ea:4f:72:78:46:12:96:11:52:e0:8e:20:3b:4b:
0a:95:83:63:1b:ae:35:7e:e1:42:49:65:f3:88:d8:
d6:c8:83:25:4f:13:63:bf:22:64:29:2b:a2:f3:d1:
fe:67:72:89:8c:1b:bd:55:72:dc:df:d2:f2:33:0e:
3b:58:19:c0:02:49:d1:0b:17:e7:65:93:f5:73:c1:
1d:1a:60:fc:48:7d:8d:7b:23:0f:22:e8:15:0d:f0:
52:bc:9c:5e:21:23:8d:a3:04:1e:36:bd:39:0d:8b:
0f:2d:f5:3d:dd:3e:aa:8c:b4:36:50:a5:05:18:61:
17:75:48:8c:07:6d:22:54:75:65:8a:ae:85:2a:ac:
fd:0b:8c:1e:a9:7b:97:f0:bd:ee:91:01:3f:fe:67:
b0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BE:61:9F:E0:6B:08:F3:B9:96:33:C2:16:46:91:41:61:71:CB:AD
X509v3 Authority Key Identifier:
keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/Mb5hn-BrCPO5ljPCFkaRQWFxy60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.16.0/21
62.84.248.0/21
176.113.168.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:ec:d2:c2:aa:34:65:bf:4d:64:1f:db:85:b3:b2:96:95:f2:
2a:f5:05:9d:17:19:5f:fd:1e:e2:b5:3a:39:b7:ba:1c:b0:09:
9b:dc:a8:1c:2c:72:73:12:73:7c:d2:78:a9:19:80:db:94:19:
7a:b6:fa:d1:ab:7c:68:a0:50:ce:22:47:96:57:eb:d9:a5:34:
08:bd:cf:7d:29:80:ae:24:46:3a:33:a1:6c:d3:42:73:8e:6e:
fd:63:a8:b6:29:f7:1e:be:0f:70:fb:37:6d:1b:47:bc:63:a5:
c6:49:6e:0c:20:f5:59:77:7f:32:b6:29:f3:b6:ae:7a:24:ac:
5a:c8:74:c1:ea:81:85:33:29:cf:0d:9e:de:15:bd:3f:9d:47:
32:92:39:5b:6a:13:80:cc:09:ac:77:7b:fd:22:15:fb:5d:03:
09:7f:04:dc:a6:8e:9a:fc:95:5e:ac:c1:9e:7e:07:a3:8f:45:
50:db:4a:fe:f4:4f:ab:12:e4:f1:fd:59:88:62:ae:c7:3c:cf:
e2:43:b7:88:d2:f7:03:e9:a8:39:07:46:29:e4:95:bc:a7:c7:
b7:ca:50:02:1b:ca:89:8b:c2:64:b5:da:6c:d2:d8:36:b2:27:
17:ab:aa:0a:4c:7f:b0:84:50:e9:a7:96:11:9a:ff:99:81:ea:
59:a6:db:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:04:09 2026 by rpki-client